Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/5c279b9f-62e5-3859-80b1-76b8ca66a008.roa
File:                     5c279b9f-62e5-3859-80b1-76b8ca66a008.roa (raw, json)
Hash identifier:          V4NKAmGp2pkhd9IIkCJk33E6Qa9vwdE3mopC8iSrEjA=
Subject key identifier:   DB:5A:4F:63:D7:19:A2:DF:6B:14:AC:21:22:AC:BB:DC:7E:0C:CD:14
Certificate issuer:       /CN=4182f5c3-1977-4f18-997f-c945eaea051e
Certificate serial:       010D0C9F4328584D651529B7834660B8AA850580
Authority key identifier: DC:48:C3:92:1C:15:6E:3D:5C:18:09:E9:73:CF:F0:29:D6:5B:7D:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/5c279b9f-62e5-3859-80b1-76b8ca66a008.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     18470
IP address blocks:        23.154.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/4182f5c3-1977-4f18-997f-c945eaea051e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/4182f5c3-1977-4f18-997f-c945eaea051e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:29:b7:83:46:60:b8:aa:85:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4182f5c3-1977-4f18-997f-c945eaea051e
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=70f24074-8290-433c-be1a-69f619182989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:09:4e:49:43:6e:6f:ac:db:99:d7:9e:b8:74:
                    bb:9d:a2:ac:de:1e:8e:e4:57:01:75:62:64:22:2f:
                    38:92:4b:56:bd:26:74:92:67:91:27:c1:35:4f:83:
                    f8:d8:9a:52:98:55:73:62:6d:55:4e:0a:64:13:f7:
                    a1:92:df:88:05:7f:c1:da:a0:43:74:5e:b2:86:82:
                    d0:4e:c7:39:52:6c:e9:95:d0:ac:c3:bf:5c:e9:7a:
                    bb:5f:5d:ef:f5:5f:39:d7:b6:a7:af:b5:f3:87:80:
                    94:17:6d:5a:c8:73:82:dc:e0:4a:44:5e:cf:d1:80:
                    f2:36:8b:5d:37:16:c8:44:af:de:e6:3b:c8:f3:14:
                    af:36:3c:2f:4d:ea:5a:c9:78:c5:fe:d8:db:ef:34:
                    4c:35:a8:34:44:12:1f:94:b8:6d:b3:9a:23:c8:ac:
                    2b:1e:c2:c4:9e:26:b9:8a:e5:c2:3c:3b:90:07:73:
                    b9:ab:a6:8e:ba:d2:f7:09:ff:24:95:d2:e2:8b:68:
                    04:7e:d7:46:65:69:e5:63:ed:f1:2f:98:71:f5:13:
                    ca:8c:1d:26:27:61:ae:a8:6e:ba:34:3f:81:8f:4c:
                    49:25:41:29:b7:5b:74:0b:d0:87:17:14:7f:65:0a:
                    56:3e:ad:da:86:27:8b:a7:e8:a4:35:a9:04:70:c5:
                    29:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:5A:4F:63:D7:19:A2:DF:6B:14:AC:21:22:AC:BB:DC:7E:0C:CD:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/5c279b9f-62e5-3859-80b1-76b8ca66a008.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/4182f5c3-1977-4f18-997f-c945eaea051e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:48:C3:92:1C:15:6E:3D:5C:18:09:E9:73:CF:F0:29:D6:5B:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ec:87:8c:92:a0:b6:aa:b1:e8:78:27:27:c1:3d:10:01:de:
         e8:ff:ce:11:de:4a:4e:81:00:ec:a7:84:90:cd:19:c4:99:6f:
         f5:05:f2:14:b3:47:bb:7f:ab:b1:55:65:b8:1c:4f:3e:14:49:
         6b:e7:3a:f8:cb:d9:5a:2b:dc:52:00:5f:77:02:8c:eb:76:09:
         13:14:d1:23:e1:ea:e2:b4:6c:fa:cf:ab:98:8d:b4:d7:d5:23:
         05:e9:a3:b4:12:b0:f7:26:7e:3a:3e:25:f1:f7:a5:4e:85:60:
         3e:16:94:8d:c5:f9:61:1b:4a:87:b0:3b:d2:09:6a:9b:5d:f3:
         6c:7e:fe:f9:2c:70:63:e3:40:65:f7:48:98:1e:6a:ce:75:56:
         77:25:f4:3b:1c:9a:ce:1f:2f:e2:73:1a:96:60:fe:8c:3a:fe:
         11:ef:47:cb:ea:20:53:8b:29:52:db:23:be:d7:1b:98:25:45:
         9c:d4:8c:d6:8e:ec:3d:5b:0b:01:a3:8e:16:e9:3e:34:a4:ec:
         04:56:f4:d6:d0:f7:19:fd:61:12:85:ce:19:14:87:3d:61:5e:
         e9:2a:8a:e5:d6:6a:a5:6e:5b:38:a1:f3:f3:17:0f:2f:7f:05:
         92:ed:1e:48:ee:00:85:3b:86:55:dd:66:da:1e:69:d0:bf:c7:
         5e:49:fe:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:47:38 2026 by rpki-client